www.cma-cgm.com

- CMA CGM -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 6a:e0:0d:0f:a2:b3:29:8f:49:73:e8:8d:d9:30:c1:84 was issued on by GeoTrust Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CMA CGM

Organization: CMA CGM
Organization unit: IT
State / Province: Bouches-du-Rhone
Locality: MARSEILLE
Country: FR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:e0:0d:0f:a2:b3:29:8f:49:73:e8:8d:d9:30:c1:84
Serial Number (int): 142061506959613334675246904419516727684
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 49:67:87:92:a1:ec:50:92:b7:52:cb:98:9f:ae:88:e5:9d:84:ea:1f
Fingerprint (sha256): 2d:b0:82:88:f7:07:01:c2:56:05:1e:da:7e:31:9b:6c:66:80:fc:72:16:0b:51:5a:5e:46:d4:37:62:b4:fc:9d

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.cma-cgm.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cma-cgm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

monitor-akamai.cma-cgm.com
monitor-akamai.delmas.fr
monitor-akamai.cma-cgm.fr
monitor-akamai.delmas.com
monitor-akamai.anl.com.au
cma-cgm.com
www.cnc-ebusiness.com
www.anl.com.au
www.cma-cgm.fr
www.delmas.com
monitor-akamai.cnc-ebusiness.com
www.delmas.fr
www.cma-cgm.com

Other certificates including the domain name cma-cgm.com

(limited to 100 certificates)
eye.cybersecurity.cma-cgm.com
cdrsharepoint.cma-cgm.com
www.quantil.com
departments.mira-ng.cma-cgm.com
mrs-vs-00588.cma-cgm.com
inlandtariffs.cma-cgm.com
cart.cma-cgm.com
*.quantil.com
brsaoccw-vepe01.america.cma-cgm.com
dcs.cma-cgm.com
www.quantil.com
www.cma-cgm.com
LINES.MIRA-NG.CMA-CGM.COM
teamsite.cma-cgm.com
*.cma-cgm.com
mta.survey.cma-cgm.com
lisa.m.cma-cgm.com
sapdatamig.cma-cgm.com
mail.usa.cma-cgm.com
stackingperiod-id.cma-cgm.com
lyncpool.im.cma-cgm.com
join.cma-cgm.com
edi-ac-uat.ws.cma-cgm.com
LINESERVICES.CMA-CGM.COM
ecampus.cma-cgm.com
www.apl.com
realestate.cma-cgm.com
*.usa.cma-cgm.com
lines.mira-ng.cma-cgm.com
tsg-app-pre.cma-cgm.com
laragrm.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
cme.cma-cgm.com
teamsite.cma-cgm.com
digital-services-apis.cma-cgm.com
laragrm.cma-cgm.com
edi-ac-pre.ws.cma-cgm.com
eservices.cma-cgm.com
cma-cgm.com
extid.cma-cgm.com
hybrid1.cma-cgm.com
agency.cma-cgm.com
cmamail.cma-cgm.com
apps.asia.cma-cgm.com
www-orig.anl.com.sg
tsg-app-prd.cma-cgm.com
eye.news.cma-cgm.com
www.cma-cgm.com
C-ME.CMA-CGM.COM
wac2013.cma-cgm.com
freddie.cma-cgm.com
auth-pre.cma-cgm.com
CMAHK-EE.asia.cma-cgm.com
www.quantil.com
www.quantil.com
www.quantil.com
beta.cma-cgm.com
signing-auth.cma-cgm.com
c-me.cma-cgm.com
demadminrh.cma-cgm.com
cdrsharepoint.cma-cgm.com
jobme.cma-cgm.com
ebusiness.cma-cgm.com
*.cma-cgm.com
cmaid.cma-cgm.com
lineservices.cma-cgm.com
eservices.cma-cgm.com
www.quantil.com
signing-auth-pre.cma-cgm.com
dcs.cma-cgm.com
usorfccw-snm002.usa.cma-cgm.com
csg02.cma-cgm.com
ext-tw.cma-cgm.com
tsg-euroinfo-saa-uat.cma-cgm.com
*.usa.cma-cgm.com
cmaedi.cma-cgm.com
vegapps.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
mira-group.cma-cgm.com
others.mira-ng.cma-cgm.com
realestate.cma-cgm.com
shiptracking.cma-cgm.com
camp.cma-cgm.com
www.cma-cgm.com
bna-sv-cucc1.usa.cma-cgm.com
realestate-test.cma-cgm.com
tariff.apl.com
mtl-webmail.usa.cma-cgm.com
camp.cma-cgm.com
lisa-uat.m.cma-cgm.com
imars.cma-cgm.com
hybrid1.cma-cgm.com
tsg-euroinfo-saa-pre.cma-cgm.com
auth.cma-cgm.com
www.quantil.com
shiptracking.cma-cgm.com
join.cma-cgm.com
eservices.cma-cgm.com

Certificate

The complete raw certificate details for www.cma-cgm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIQauAND6KzKY9Jc+iN2TDBhDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwMzE3MDAwMDAwWhcNMTcwNTE2MjM1
OTU5WjB1MQswCQYDVQQGEwJGUjEZMBcGA1UECBMQQm91Y2hlcy1kdS1SaG9uZTES
MBAGA1UEBxQJTUFSU0VJTExFMRAwDgYDVQQKFAdDTUEgQ0dNMQswCQYDVQQLFAJJ
VDEYMBYGA1UEAxQPd3d3LmNtYS1jZ20uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs/rTBVIiJt3uuqR02N6sqBIgqM3boWjM6B2QtgnrTn0vbdwm
LD8b/h8+n7aw9c9dvfLjpGP+f+d9w6mqljC6TnQQPjBUeGqIZuUZM/vWp3+AujcR
zEftzqNLa8dLN9k3oLrlkzeHDiVcQQN/oQrxLU4Dow/u2RRBfxFGSK6DOURxG9yz
HbOdaPMsmt+bmmshpPD/V9Se5TH8vu9SepJGKLEacJhjr8v2Z6kAhShqFny8arxW
ZYsVEMvo3OfdHQPjYh3mr0y3xh7AJm5kIWnYt1y+4d3WHujxvZZdTc9vauDDhFcO
y704fQqd4rPBdNIMHC8siW2NJDYf5/Ko7UbEywIDAQABo4ICszCCAq8wggEqBgNV
HREEggEhMIIBHYIabW9uaXRvci1ha2FtYWkuY21hLWNnbS5jb22CGG1vbml0b3It
YWthbWFpLmRlbG1hcy5mcoIZbW9uaXRvci1ha2FtYWkuY21hLWNnbS5mcoIZbW9u
aXRvci1ha2FtYWkuZGVsbWFzLmNvbYIZbW9uaXRvci1ha2FtYWkuYW5sLmNvbS5h
dYILY21hLWNnbS5jb22CFXd3dy5jbmMtZWJ1c2luZXNzLmNvbYIOd3d3LmFubC5j
b20uYXWCDnd3dy5jbWEtY2dtLmZygg53d3cuZGVsbWFzLmNvbYIgbW9uaXRvci1h
a2FtYWkuY25jLWVidXNpbmVzcy5jb22CDXd3dy5kZWxtYXMuZnKCD3d3dy5jbWEt
Y2dtLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCg
HqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGP
BgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNv
bS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRw
czovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWww
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0
hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0
cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNv
bS9nbi5jcnQwDQYJKoZIhvcNAQELBQADggEBAJaq4opv6jPFxnAZdnm7hgV5rYlR
DVQyZZsx4tb9fyzEg4/x3mKgWU5RqMEiay2aFFHH+ZFKrT3NDP/LcLk1Yo8/e7Hz
ShGlJIubQmohqnHXwmaSXTXnIL/LERhWy1r+H4ICS/8lELKHMPH/OtoRmfyLymlY
TuMzBtsZqBgu2Zh49SPNE+Yah2IsfrsCaxFhc04p/02YPHMJxaX0HzP20NapE2zV
cn+Bdg2VXNFZYz9LZ90Pm0p4pqWzCc2j8I43oBt2G+vxMtGrlR/YPFHLZk7ka12S
js5FIW89XOZDSkMrShoqZWRXxeTiJ12iQnF2saVsoIV5jyJNP7Acvk61m6I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rTBVIiJt3uuqR02N6s
qBIgqM3boWjM6B2QtgnrTn0vbdwmLD8b/h8+n7aw9c9dvfLjpGP+f+d9w6mqljC6
TnQQPjBUeGqIZuUZM/vWp3+AujcRzEftzqNLa8dLN9k3oLrlkzeHDiVcQQN/oQrx
LU4Dow/u2RRBfxFGSK6DOURxG9yzHbOdaPMsmt+bmmshpPD/V9Se5TH8vu9SepJG
KLEacJhjr8v2Z6kAhShqFny8arxWZYsVEMvo3OfdHQPjYh3mr0y3xh7AJm5kIWnY
t1y+4d3WHujxvZZdTc9vauDDhFcOy704fQqd4rPBdNIMHC8siW2NJDYf5/Ko7UbE
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142061506959613334675246904419516727684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bouches-du-Rhone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MARSEILLE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CMA CGM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cma-cgm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22720342661067688521286606473170456100792785702165004994527752589343050645001269272983949979801345428386358039829185355488270864772266338842384721321437257805512702790386760532642903561410209360815758226644334440494756842217206692623822488197470041654508058957622002325642588673395244966700581419840209770224391970615081315093635173156710623685268679079986981203993371088357793175163028208592967729923612161825608051045175434015246568362093175343440683355282161653249557059371416518676282109606829667721477404319806639970930132590090592437314818715903544610788019718118244265084557162653990494733595751514880401130699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (289 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.delmas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.cma-cgm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.delmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.anl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cma-cgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnc-ebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cma-cgm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor-akamai.cnc-ebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delmas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cma-cgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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